User Authentication

​

Prerequisites

• A Microsoft Entra ID tenant
• Administrator access to your Genow instance

​

Step 1: Configure Microsoft Entra ID

1. Sign in to the Azure Portal
2. Navigate to Microsoft Entra ID > App registrations
3. Click New registration
4. Fill in the following details:
   • A name for the application, e.g.: “Genow - PRD”
   • Supported account types: “Accounts in this organizational directory only”
   • Redirect URI - Single-page application (SPA): https://your-genow-instance.cloud
5. Click Register

​

Step 2: Configure Application Settings

1. In your new app registration, go to Authentication
2. Under “Platform configurations”:
   • Remove any existing “Web” platform configuration
   • Add “Single-page application” as platform configuration
   • Enter your application URLs:
     • Application URL: https://your-genow-instance.cloud/login
     • Redirect URIs:
       • https://your-genow-instance.cloud/login
       • https://your-genow-instance.cloud

     Note: The URLs may differ based on your setup. Please ensure you add the correct URLs for your instance.

3. Under “Implicit grant and hybrid flows”, ensure that both are disabled:
   • Access tokens (used for implicit flows)
   • ID tokens (used for implicit and hybrid flows)
4. Go to API permissions
5. Add the following Microsoft Graph permissions:
   • User.Read
   • email
   • profile
   • openid
6. Click Grant admin consent

​

Step 3: Configure API Scopes

1. In your app registration, go to Expose an API
2. Add a new scope:
   • Scope name: genow
   • Base URI: api://your-application-id

   Note: Replace your-application-id with your actual application ID

​

Step 4: Get Required Information

1. In your app registration, note down:
   • Application (client) ID
   • Directory (tenant) ID
2. Provide these information into your Genow platform to Certificates & secrets

​

Step 5: Configure Genow

1. Log in to your Genow instance as an administrator
2. Add the following information to the Genow Platform’s Secret Manager:
   • AZURE_CLIENT_ID: Your application (client) ID
   • AZURE_CLIENT_SECRET: Your client secret
   • AZURE_TENANT_ID: Your directory (tenant) ID
3. After adding the secrets, run the following commands to update the infrastructure:
   Copy

   Ask AI

   # Update Terraform configuration
   terraform apply
   
   # Run CI/CD pipeline to apply changes for your Genow application
   
   
4. Wait for the infrastructure updates to complete

​

Step 6: Test the Integration

1. Sign out of Genow
2. Click the “Sign in with Microsoft” button
3. You should be redirected to Microsoft’s login page
4. After successful authentication, you should be redirected back to Genow

​

Important Notes

• The authentication is handled through the Microsoft Authentication Library (MSAL)
• We recommend providing access to your Entra ID application to our support team for better assistance
• Additional documentation for application roles and user permissions will be provided separately

​

Troubleshooting

1. Verify all configuration values are correct
2. Ensure the redirect URIs match exactly
3. Check that users exist in both systems
4. Review the Genow logs for any error messages
5. Verify that implicit grant and hybrid flows are disabled
6. Confirm that the API scope is correctly configured

​

Security Considerations

• Regularly rotate the client secret
• Monitor sign-in logs for suspicious activity
• Keep your Microsoft Entra ID tenant secure
• Review and audit user access regularly